VulnerabilityModified
CVE-2022-36638
An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders.
MEDIUM 5.3EPSS 0.92%
Does this matter?
Lower severity and a low EPSS score (0.92%). Track it; it rarely justifies an emergency change on its own.
Description
An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.92% probability · 58th percentile
- CISA KEV
- Not listed
- Affected
- garage management system project/garage management system
- Source
- cve@mitre.org
References
- https://senzee.net/index.php/2022/07/21/vulnerability-of-garage-management-system-1-0/Exploit, Third Party Advisory
- https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.htmlProduct
- https://senzee.net/index.php/2022/07/21/vulnerability-of-garage-management-system-1-0/Exploit, Third Party Advisory
- https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.htmlProduct
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.